Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2022-0386 Moderate: Poppler Integer Overflow Issue

mageia
Calendar Grey October 23, 2022
Dist Mageia Esm H88
MGASA-2022-0387: Revised Samba packages fix buffer overflow and security issues, released on October 25, 2022.
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc)

Summary

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. (CVE-2022-38784)

References

- https://bugs.mageia.org/show_bug.cgi?id=30805

- https://www.openwall.com/lists/oss-security/2022/09/02/11

- https://lists.debian.org/debian-security-announce/2022/msg00193.html

- https://ubuntu.com/security/notices/USN-5606-1

- https://ubuntu.com/security/notices/USN-5606-2

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/

- https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html

- https://www.cve.org/CVERecord?id=CVE-2022-38784

Topics%20covered

Topics Covered

security advisory moderate integer overflow execution risk crash Poppler Mageia

Resolution

SRPMS

- 8/core/poppler-20.12.1-1.2.mga8

Publication date: 23 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0386.html
Type: security
CVE: CVE-2022-38784

Topics%20covered

Topics Covered

security advisory moderate integer overflow execution risk crash Poppler Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here